UltraView Getting Started

8/3/2019 UltraView Getting Started

1/41


2/41

Configure NetFlow on a Cisco Router

First, log in to the router and enter enable mode (en), then start configuring from the terminal :

conf t

Enable Cisco Express Forwarding, required by most recent IOS versions for NetFlow to work:

ip cef

Set the source address of the generated NetFlow exports. You can use any interface with a fixed IP address:

ip flow-export source FastEthernet0/0

Set up a read-only SNMP community. If you use something other than public you need to add it to

UltraView in :

snmp-server community public

Set the NetFlow timeouts so flows are exported in close to real time:

ip flow-cache active timeout 1;ip flow-cache inactive timeout 15

Set the NetFlow version. Some very old IOS releases may not support version 9; in that case use version 5.

ip flow-export version 9; switches export version 7

Enable NetFlow for inbound traffic on every routed interface. You should also set the bandwidth (in kbps)

in both directions for WAN interfaces. Older IOS releases may not support ip flow ingress; in that case use

ip route-cache flow:int FastEthernet0/0 ip flow ingress; exit

int Dialer0; ip flow ingress; bandwidth 1000; bandwidth receive 8000;exit

Alternatively, you can enable NetFlow for traffic in both directions on a single interface:

int Dialer0; ip flow ingress; ip flow egress; bandwidth 1000; bandwidth receive 8000;exit

Set the destination for the generated NetFlow exports. This is the address of the UltraView server and

one of the ports it is configured to receive NetFlow on. Port 2055 is configured by default:

ip flow-export destination a.b.c.d 2055

Finally, exit configure mode (exit), and don't forget to save the configuration to non-volatile memory (wrmem).


3/41

NetFlow on Cisco Catalyst Switches

Copy and Paste these links into your browser window if they are not active

Configure NetFlow on a Cisco Catalyst 6500 series switch running native IOS

http://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-

netflow-on-a-cisco-catalyst-switch-runnin.html

Configure NetFlow on a Cisco Catalyst 6500 series switch running CAT OS


netflow-data-export-on-a-cisco-catalyst-s.html

Configure NetFlow on a Cisco Catalyst 4000 and 4500 series switch


netflow-on-a-cisco-catalyst-4000-or-4500.html
http://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-4000-or-4500.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-data-export-on-a-cisco-catalyst-s.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.htmlhttp://www.dangnetworks.com/faq/netflow-configuration/how-do-i-configure-netflow-on-a-cisco-catalyst-switch-runnin.html


4/41

Enter SNMP Community strings and

UDP Ports


5/41

Add an SNMP Device


6/41

Enter IP Address

Select add a device and enter

device IP address; hit enter twice

to add more devices or click add

a device again


7/41

Manage interfaces


8/41

Manage interfaces


9/41

GUI Features


10/41

Drag your mouse across a chart

Swoop your mouse

in a chart


11/41

Examine this interface


12/41

Examine this interface results:


13/41

Select an application for a range of

options

Hover your mouse over

an application to

isolate it on the chart

Name the application

straight from the GUI

Left click application

to get more detail

Click to see everyone using

this application


14/41

Search for an IP address

Search for an address or

domain, always at the top

right corner


15/41

Search Results: see the traffic rates

and all sessions for that IP address


16/41

Security Dashboard


17/41

Set email or syslog alerts


18/41

1st Step: Add e-mail server or syslog target


19/41

Set up time frames for individual alerts


20/41

Example: Bandwidth Utilization Alert


21/41

Begin setting up your alert


22/41

Customize your alert triggers


23/41

Example: Application Alert Trigger


24/41

Alerts will be forwarded to email and

syslog targets and be seen on the overview

dashboard and in views in UltraView

S l t d Filt i


25/41

Select and Filter a view

First select this

iconEdit/Filter a

view

Remove

view from

dashboard


26/41

Begin Editing a View


27/41

Change the Time Span


28/41

Edit by interface, application, IP

address, server address, and client

address

B ild C D hb d


29/41

Build Custom Dashboards


30/41

Select from all

views and dashboards to enable customization


31/41

When you are in the dashboard edit

mode you can save all your edits!


32/41

Apply and save filters


33/41

Add and edit views to your custom

dashboard


34/41

Re-size and move views in the edit mode


35/41

Two Views side by side; all nine views

can be added to a dashboard


36/41

Administrator can add users and

create groups in UltraView


37/41

Administrator creates groups and decides

what levels of restrictions to apply

After creating a group administrator


38/41

After creating a group, administrator

begins to build a custom dashboard for Joe

User


39/41

Administrator created a custom

dashboard for Joe User group


40/41

Joe User signs in

Joe User signs into a static read only


41/41

Joe User signs into a static read only

dashboard that still has the ability to update

data

UltraView Getting Started

Documents

Transcript of UltraView Getting Started